WinMessenger open random ports every... 15sec.

  • Thread starter Thread starter .: Emily and TheGhost :.
  • Start date Start date
E

.: Emily and TheGhost :.

Windows Messenger.
I connect to the internet the Windows Messenger is running but not
connected. If I use "netstat -an" I see something strange...
=
TCP 151.26.24.233:15786 0.0.0.0:0 LISTENING
=
This port on listening... if I try FPORT on it, I see that the process using
that port is windows messenger.
=
FPort v2.0 - TCP/IP Process to Port Mapper
Copyright 2000 by Foundstone, Inc.
http://www.foundstone.com
1148 msmsgs -> 8868 TCP C:\Programmi\Messenger\msmsgs.exe
=
Now... the "strange" fact is that every 15seconds that TCP Port on listening
change... with any other random port. And this sounds a bit unusual to me...
or it's some kind of windows messenger routine !? Even if sometime seems to
stabylize and the port doesn't change. But usually every time I connect to
the internet, the ports become opened after three seconds, then every 15sec.
it change. The fact... is that the process lead to Windows Messenger as you
can see. Le me know, I really don't know what to think (maybe it's normal...
i don't know :-) thanks in advance, I hope here I could find an answer.

..: Emily and TheGhost :.
 
Another thing...
I tried to go in the firewall configuration... of the connection... and I
seen, lots of ports (msmsgs / windows messenger) checked to be opened. TCP
and UDP... but many... I took a look to my other connection and I saw the
same amount of port for messenger but only a few where checked. I tried to
delete that connection and to recreate another connection. I gone to the
firewall setting, and I found... strangely... that all ports were blocked,
included the ones used by messenger. I just opened the ports for Emule...
and WinMx. Then I left all the messenger port blocked. Tryied
WindowsMessenger... it works... when I executed "that" changing port appear,
but this time... seems to be fixed... let me look... ... ...yes, fixed.
After that, I took a look (again) at the firewall settings... and... all
that lots of ports UDP/TCP used by messenger disappeared. Remaining only a
few UDP ports and one TCP port only. Same on the other connection. I really
don't know what to think... seems to be a book by Agata Christie :-P let me
know, i really want to know why this happen and... if it's normal or due
to... something "strange" (trojan).

..: Emily and TheGhost :.
 
Back
Top